bugtraq - Re: On product vulnerability history and vulnerability complexity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 04 Apr 2006 10:49:02 +0300
From: Javor Ninov <drfrancky@...urax.org>
To: Gadi Evron <ge@...uxbox.org>
Cc: Crispin Cowan <crispin@...ell.com>,
	"Steven M. Christey" <coley@...re.org>, bugtraq@...urityfocus.com
Subject: Re: On product vulnerability history and vulnerability complexity


Sorry if i sound rude but:
Gadi Evron wrote:

> Looking even at web applications and their history one can easily tell if:
> 1. They are professionally written.
> 2. The vulnerabilities seen before and the ones we could find are not
> trivial or really say anything about the coder.
> 
> That's how we chose WordPress for blogging.
So you mean that XSS is not trivial and difficult to spot ?
For today code XSS is unacceptable and speaks very for the author.


--
Javor Ninov aka DrFrancky
securitydot.net



Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)